Senior ISE Policy Lead for Cisco Identity Services

THE BISON GROUP LLC; Landover (MD); On-site; USD 130,000 - 170,000; Full time

Job summary

The Bison Group LLC is seeking a senior ISE policy engineer to lead authentication and authorization policy design, testing, and deployment across enterprise environments in the United States. You will drive policy workflows, integrate ISE with AD, PKI, and security tools, and own remediation and change control processes.

Responsibilities include Tier 3 incident support, ISE health monitoring, upgrades, and creating robust documentation and SOPs.

Qualifications

• Active TS/SCI clearance with CI Polygraph eligibility.
• DoD 8140/8570 IAT II or equivalent certification.
• CCNA certification.
• CCNP Security or CCNP Enterprise preferred.
• 5+ years Cisco ISE engineering/administration experience.
• Experience designing and sustaining Cisco ISE authentication/authorization policies.
• Experience with 802.1X, EAP-TLS, MAB, RADIUS, TACACS+, CoA, dynamic VLAN assignment.
• Experience integrating ISE with AD, PKI, switches, and endpoint-management/security platforms.
• Ability to work independently and coordinate across multiple teams.

Responsibilities

• Lead ISE and C2C policy engineering and documentation.
• Implement enterprise access-control methods (802.1X, RADIUS, TACACS+).
• Develop C2C enforcement workflows and remediation actions.
• Lead ISE integrations with AD, PKI, and security platforms.
• Provide Tier 3 troubleshooting and incident support for ISE-related issues.
• Maintain ISE platform health, deployments, and disaster-recovery procedures.
• Plan upgrades, patches, and policy migrations for ISE.
• Define policy naming, baselines, and SOPs; review changes for risk.

Skills

Active TS/SCI clearance

CI Polygraph eligibility

IAT Level II certification (DoD 8140/-

CCNA certification

CCNP Security or CCNP Enterprise (desi

Cisco ISE engineering/administration

802.1X/EAP-TLS/MAB/RADIUS/TACACS+

AD/PKI/integration with ISE

Education

Bachelor's +5 Yrs

Associates +7 Yrs

High School/GED +9 Yrs

Masters +3 Yrs

PhD +1 Yrs

Tools

Cisco ISE

Active Directory

PKI/Certificate services

SIEMs

pxGrid

TACACS+/RADIUS

Job description

The Bison Group LLC is seeking a senior ISE policy engineer to lead authentication and authorization policy design, testing, and deployment across enterprise environments in the United States. You will drive policy workflows, integrate ISE with AD, PKI, and security tools, and own remediation and change control processes.

Responsibilities include Tier 3 incident support, ISE health monitoring, upgrades, and creating robust documentation and SOPs.